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(57) Abstract: Communication between a private 
network (1) and a roamning mobile terminal (4), 
the private network (1) including a home agent 
(5) for the mobile terminal and a gateway (2, 
3) through which, the communicationpassesand 
which-provides security protection for the private 
network (l).The protocolsof thecommunication 
Including security association bundles each 
include a security association between the mobile 
terminal (4) and the gateway (2, 3) for inbound 
communication and another security association 
for outbound communication. In response to a 
handover of communication causing an IP address. 
(MN Co @) of the mobile terminal (4), to change 
to a new IP address (MN: New Co @), the mobile 
terminal updates its inbound security association 
from the, gateway (2, 3) so that it can receive 
packets sent to it with the new IP address (MN 
New Co @) as destination. It sends a first signalling 
message with: the home agent (5) as destination: in 
a secure tunnel (20*) to the gateway (2, 3), indicating 

form to the home agent (5). The inbound security association of me gateway ^ @) * 

signalling message without cheking its source adLss. The i^/JS^! ^Z^LZnt ' ' 
network (1) to the home agent (5), the home agent (5) checks^ validity of ^ P "T 

i^TX^i^ signaIHnfi message to * e gateway ^ 3) indicatin * 
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